SafePass - Password Manager

SafePass is a password manager for Android devices that lets users securely store their login information, credit card details and notes. The application utilizes password based encryption (AES-256) to store user data. The user initially sets up a master password which grants entry into the application. The master password is never stored, and encryption is done locally on the device.

Install

• Requires Android ICS 4.1.2 and above (API 16+)
• Download the .apk file
• Go to Settings -> Security -> Unknown sources (make sure it is enabled)
• Click on the downloaded .apk file to install

Main Features

• Securely store login information (passwords), credit card information and notes.
• Generate new and secure passwords with a customizable password generator.
• Password strength indicator. Also Indicates if the password entered is common or easily guessable.
• Backup encrypted data to a backup file.
• Share backup file with a variety of applications like Dropbox, Google Drive, Gmail, etc.
• Import encrypted backup file.
• Customizable auto-lock feature that locks the app after a certain amount of time.
• Customize the number of login attempts.
• Quick copy of passwords, credit card details, and notes.
• Clear clipboard option.
• Reset master password.
• Contains no advertisements.

Security Features

• The application encrypts all user data with AES-256 bit encryption.
• The key to encrypt the data is derived from the Master Password using a Password Based Key Derivation Function (PBKDF2 with Hmac SHA1). The key is salted with a randomly generated 256-bit salt using Java's SecureRandom class. The encryption is performed with 1024 iterations to encrypt the data. This makes brute force attacks more difficult.
• The Master Password is never stored. Instead, it is transformed into a one-way 512-bit salted hash (using PBKDF2 with Hmac SHA1). The result is then hashed 1024 times. The salt helps to protect from offline dictionary attacks and the repetitive hashing makes brute force attacks more difficult.
• The app auto-locks to prevent a security breach (customizable).
• Clears the clipboard after exiting the application (customizable).
• Limits the number of login attempts to prevent a security breach (customizable).
• No internet access permission used. Only permissions used are to read and write to external storage (to support import and export of backups).

Screenshots

Frequently Asked Questions (FAQ)

1. How do I navigate within the application?
2. How do I add a login, wallet or note entry?
3. How do I delete a login, wallet or note entry?
4. How do I copy data from a login, wallet or note entry?
5. How do I edit data of a login, wallet or note entry?
6. How do I generate a new password?
7. How do I change the password generator settings?
8. How do I clear the clipboard?
9. How do I customize the number of login attempts?
10. How do I customize the auto-lock timeout?
11. How do I change/reset the Master Password?
12. How do I backup my data?
13. How do I import from a backup file?
14. How do I share my backup file?
15. Where is my backup file located?
16. Why do I get the message "No backup folder found. Cannot export" when trying to export?
17. Why do I get the message "No backup file found" when trying to import?
18. Why don't I see any data when importing from a backup?
19. Where is my Master Password stored?
20. I forgot my Master Password. How can I recover it?
21. What encryption scheme is used, and how secure is my data?

1. How do I navigate within the application?
   To navigate within the application, simply swipe left or right.
2. How do I add a login, wallet or note entry?
   To add an entry, navigate to the particular tab and tap on the add icon (located on the upper right hand corner).
3. How do I delete a login, wallet or note entry?
   To delete an entry, navigate to the particular tab and long click on the desired entry. A delete icon will appear on the upper right hand corner of the screen. You can select multiple entries and then tap the delete icon.
4. How do I copy data from a login, wallet or note entry?
   To quickly copy data from an entry, tap on the clipboard icon of the desired entry. To access the advanced copy menu, long-click on the clipboard icon of the desired entry.
5. How do I edit data of a login, wallet or note entry?
   To edit an entry, tap on the edit icon located on the right hand corner of the desired entry.
6. How do I generate a new password?
   To generate a new password, tap on the generate icon located to the right of the password field. To access the quick settings for the password generator, long-click on the generate icon and select the desired settings. These settings inherit from the main password generator options located in the settings menu.
7. How do I change the password generator settings?
   There are two ways to change the password generator settings. One option is to go to the Settings menu and selecting the desired options under "Password Generator" (these settings are applied to all passwords). Another way is to long-click on the generate password icon located to the right of the password field (these settings apply only to the current password, and inherit from the main settings).
8. How do I clear the clipboard?
   To clear the clipboard, tap on the expand icon on the taskbar. A drop-down menu will appear. Then, tap on "Clear Clipboard". The application can also clear the clipboard automatically when it exits. To enable this, go to the Settings menu and make sure "Clear Clipboard" is enabled.
9. How do I customize the number of login attempts?
   To customize the number of login attempts, go to the Settings menu and tap on "Login Attempts".
10. How do I customize the auto-lock timeout?
    To customize the number auto-lock timeout, go to the Settings menu and tap on "Auto-lock Timeout".
11. How do I change/reset the Master Password?
    To change/reset the Master Password, tap on the expand icon on the taskbar. A drop-down menu will appear. Then, tap on "Reset Password".
12. How do I backup my data?
    To backup your data, tap on the expand icon on the taskbar. A drop-down menu will appear. Then, tap on "Export Backup". This will write an encrypted backup file to your primary storage destination (either internal storage, or SD Card).
13. How do I import from a backup file?
    To import your data, tap on the expand icon on the taskbar. A drop-down menu will appear. Then, tap on "Import Backup". Next, enter the password associated with the backup file and tap "Import".
14. How do I share my backup file?
    To share your backup file, click on "Export Backup". After a successful export, a "Share File" dialog box will appear. Select the desired application from the dialog box.
15. Where is my backup file located?
    To view the location of your backup file, go to the Settings menu and navigate to the "About" section. You will see your backup file location under "Backup Location".
16. Why do I get the message "No backup folder found. Cannot export." when trying to export?
    This message appears when the application cannot find your primary storage destination. It may be caused because your primary storage destination is either full, or temporarily un-mounted.
17. Why do I get the message "No backup file found" when trying to import?
    This message appears when the application cannot find your a backup file in the primary storage destination. To import from a backup, place the backup file named "backup.crypt" under the "SafePass" folder in your primary storage destination. If no such folder exists, then please create one manually. (A file browser will be added in the next release).
18. Why don't I see any data when importing from a backup?
    This could occur because the password you entered while importing may be incorrect. Please ensure that the password entered when importing from a backup is the one associated with that backup file.
19. Where is my Master Password stored?
    Your master password is never stored. Only you know your master password.
20. I forgot my Master Password. How can I recover it?
    Sorry, your Master Password cannot be recovered at this time. This is to ensure data security, so be sure to remember your Master Password. (Future versions will include a recovery option).
21. What encryption scheme is used, and how secure is my data?
    Your data is ecnrypted using AES-256 bit encryption (Advanced Encryption Standard). This encryption standard is adopted by the U.S. government and is used worldwide. The key to encrypt the data is derived from the Master Password using a Password Based Key Derivation Function (PBKDF2 with Hmac SHA1). The key is salted with a randomly generated 256-bit salt using Java's SecureRandom class. The encryption is performed with 1024 iterations to encrypt the data. This makes brute force attacks more difficult.